log on locally FTP??? What is this?

Guys,

I setup an FTP server inside of IIS. It works great on the network. I can
test by looking to the local server and try my accounts and everything is
great. I try it offsite and I get a error that says you may not have
permission to access these files. I have tried everything. I have rebuilt
the FTP several times. I have tried different FTP clients. I did find one
article that says something about log on locally but one of the accounts
that I am testing with is the domain admin and also in the administrators
group. I can see in the logs that an account login was attempted but
denied. I have set the router up to open the DMZ and proved that it is not
a firewall issue.

Next thing I did is VPN in and then go in remotely across the VPN and it
works great. Has anyone got any idea what is going on. Is it a log on
locally problem? If so how do I get past this. Thanks,

Brad Wilson

"Brad Wilson" wrote in message news:(E-Mail Removed)...

: I setup an FTP server inside of IIS. It works great on the network. I
can
: test by looking to the local server and try my accounts and everything is
: great. I try it offsite and I get a error that says you may not have
: permission to access these files. I have tried everything. I have
rebuilt
: the FTP several times. I have tried different FTP clients. I did find
one
: article that says something about log on locally but one of the accounts
: that I am testing with is the domain admin and also in the administrators
: group. I can see in the logs that an account login was attempted but
: denied. I have set the router up to open the DMZ and proved that it is
not
: a firewall issue.
:
: Next thing I did is VPN in and then go in remotely across the VPN and it
: works great. Has anyone got any idea what is going on. Is it a log on
: locally problem? If so how do I get past this. Thanks,

Is the FTP server set as anonymous only, anonymous/authenticated, or
authenticated and did you set permissions not only in IIS but at the file
system level?

--
Roland Hall
/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Online Support for IT Professionals -
http://support.microsoft.com/service...p?fr=0&sd=tech
How-to: Windows 2000 DNS:
http://support.microsoft.com/default...b;EN-US;308201
FAQ W2K/2K3 DNS:
http://support.microsoft.com/default...b;EN-US;291382

Hi Brad,

Have you tried, as a test, allowing anonymous connections?

What authentication methods have you set on the server? Are you being
prompted for credentials at all?

IIS 5 or 6?

--
HTH,
=d=


Dana Brash
MCSE, MCDBA, MCSA

(E-Mail Removed)

"Brad Wilson" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Guys,
>
> I setup an FTP server inside of IIS. It works great on the network. I
> can test by looking to the local server and try my accounts and everything
> is great. I try it offsite and I get a error that says you may not have
> permission to access these files. I have tried everything. I have
> rebuilt the FTP several times. I have tried different FTP clients. I did
> find one article that says something about log on locally but one of the
> accounts that I am testing with is the domain admin and also in the
> administrators group. I can see in the logs that an account login was
> attempted but denied. I have set the router up to open the DMZ and proved
> that it is not a firewall issue.
>
> Next thing I did is VPN in and then go in remotely across the VPN and it
> works great. Has anyone got any idea what is going on. Is it a log on
> locally problem? If so how do I get past this. Thanks,
>
> Brad Wilson
>

From outside the System you must designate what domain the account exists
in. You have to prefix the username with the Domain name
(domainname\username) when authenticating. From inside the LAN you don't
have to do that because your workstation is already logged into the domain.

I hope you returned all that stuff back the way it was supposed to be after
you needlessly changed everything all over the place.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

On 2004-10-18 15:49:44 -0400, "Brad Wilson"
<(E-Mail Removed)> said:

> times. I have tried different FTP clients. I did find one article
> that says something about log on locally but one of the accounts that I
> am testing with is the domain admin and also in the administrators
> group. I can see in the logs that an account login was attempted but
> denied. I have set the router up to open the DMZ and proved that it is
> not a firewall issue.
>

You are probably already aware of this, but FTP passes credentials in
clear text. Attempting to login via FTP across the Internet with the
domain admin credentials means you just passed your domain admin
username and password in clear text for anyone on the wire to see.

I know this doesn't answer your question, but I just wanted to mention
the potential problems of using administrative privileges when testing
FTP from the outside.

With regards to making this work, most of the other posters in this
thread have covered all the bases--NTFS (file system) permissions, IIS
permissions, logon credentials (using DOMAIN\username instead of just
username). You might also check to ensure that you haven't
inadvertently added some IP address restrictions (i.e., only allow
access from specific IP address ranges). The behavior doesn't match
that, but it doesn't hurt to check.

HTH.

--
Scott Lowe